CVE-2025-15251 | beecue FastBee up to 2.1 SIP Message ReqAbstractHandler.java getRootElement xml external entity reference (ID7HNZ)

A vulnerability categorized as problematic has been discovered in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java of the component SIP Message Handler. The manipulation results in xml external entity reference.

This vulnerability is known as CVE-2025-15251. It is possible to launch the attack remotely. No exploit is available.

The project owner replied to the issue report: “Okay, we’ll handle it as soon as possible.”